Outt
Sett
Behavioral task
behavioral1
Sample
147a584385014171cc9588bd244f7719_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
147a584385014171cc9588bd244f7719_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
147a584385014171cc9588bd244f7719_JaffaCakes118
Size
70KB
MD5
147a584385014171cc9588bd244f7719
SHA1
0b13329f3fe3e5867b18f4bb45c3f00447a51517
SHA256
c335886a0ccb979df07acbd42dafd6d12b7b75255b4c55dba43e2e6bb6d8851f
SHA512
3d3d12a5d9d48ecdb491d5ff09d39c823365521d842435a078de18a01cce79cebeb216b9716a2054515c6015fed6be611298cf3ea26296360458fd795f2d1c67
SSDEEP
1536:9a21K8d3d/nSyTYguirZmnaX9xWU1GZjbYoPQT8:o21K8v/nSDyoE2dpZ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
147a584385014171cc9588bd244f7719_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ